[Webkit-unassigned] [Bug 160027] Crash in JSC::speculationFromCell

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=160027

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |ap at webkit.org
         Resolution|---                         |CONFIGURATION CHANGED

--- Comment #2 from Alexey Proskuryakov <ap at webkit.org> ---
Thank you for the report!

Crashes in speculationFromCell are unfortunately just symptoms of garbage collection bugs occurring elsewhere. There were so many changes in related code (including several to fix speculationFromCell crashes specifically) that this old report is not actionable.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181221/94f0c51b/attachment.html>